Last year, Microsoft disclosed that a Chinese hacking group referred to as "Storm-0558" was responsible for a security breach that led to the access of the email accounts of around 25 organisations, including some US government agencies. The federal Cyber Safety Review Board has just released its report on the incident, identifying a "cascade of Microsoft's avoidable errors that allowed this intrusion to succeed". Ouch.
The Cyber Safety Review Board is composed of multiple officials from several US government departments including the Department of Homeland Security, the NSA and the FBI (via Ars Technica) and several industry leaders, and was tasked with creating the report [pdf] under a mandate from President Biden in response to the attack.
